Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/949A543291B011EDA9CB747CC4F9AE02.roa
File: 949A543291B011EDA9CB747CC4F9AE02.roa (raw, json)
Hash identifier: kJ7vseAx8oKCWZIEh7LGMwISqHiYSmYRTa8Uh4v5dWM=
Subject key identifier: E1:47:AF:0A:02:36:56:0D:39:A4:B7:E6:39:EF:B5:5D:08:66:37:DC
Certificate issuer: /CN=A9111D36/serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4
Certificate serial: 0179
Authority key identifier: C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/949A543291B011EDA9CB747CC4F9AE02.roa
Signing time: Tue 31 Dec 2024 02:36:13 +0000
ROA not before: Tue 31 Dec 2024 02:36:13 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 150423
IP address blocks: 103.38.250.0/23 maxlen: 24
2001:df1:88c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 377 (0x179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111D36/serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4
Validity
Not Before: Dec 31 02:36:13 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6773589d-b4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6f:c4:76:78:75:90:cc:89:5a:bf:a7:37:54:
42:08:10:d5:4a:7e:80:3f:03:12:1d:c6:09:ec:49:
8e:b0:5e:16:8f:4d:eb:8c:c7:97:13:3f:39:b4:50:
77:dd:83:2f:e3:d5:9a:8f:ce:70:2a:ec:1b:ba:55:
61:97:42:f9:d4:5e:f0:df:25:34:4b:c1:4e:8f:f6:
5a:83:d6:0d:bd:08:99:07:67:c1:be:a8:2e:40:b3:
fc:80:34:07:72:2e:0f:6c:6f:a2:07:78:f5:69:50:
79:f1:5a:27:07:cd:7a:13:85:74:bb:6d:b8:b8:4f:
17:4f:29:2d:c5:90:94:ea:ab:fd:ff:f6:a6:9c:39:
2a:c5:60:9b:82:3a:f5:4e:be:45:1c:ae:7a:ad:7b:
1a:0a:ba:ca:0d:99:9e:b8:28:07:58:4c:bc:b3:ab:
0c:d3:b8:ae:6b:16:cc:71:8e:10:67:79:50:45:d5:
ff:77:35:41:a3:2c:b9:63:ac:5e:9c:89:b1:0e:e5:
28:b7:58:20:e1:64:f8:3f:ab:57:ba:62:d8:98:e3:
f8:b1:f3:f9:bf:4b:66:de:63:ec:ea:a3:de:f7:9c:
f5:0d:67:39:0d:e6:71:de:8d:13:90:be:7b:bf:47:
12:39:b6:77:b2:8b:d1:96:77:0e:00:d7:fb:0b:1f:
f8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:47:AF:0A:02:36:56:0D:39:A4:B7:E6:39:EF:B5:5D:08:66:37:DC
X509v3 Authority Key Identifier:
keyid:C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/949A543291B011EDA9CB747CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.38.250.0/23
IPv6:
2001:df1:88c0::/48
Signature Algorithm: sha256WithRSAEncryption
1b:f1:21:cc:1b:40:f2:17:42:5a:bf:a2:03:d1:f4:9a:8d:7f:
1c:6e:bf:b1:7a:fe:b3:e5:f1:27:db:d5:5a:b0:55:70:16:4b:
dc:d4:ea:b3:46:7b:c0:80:bc:63:d8:af:72:b5:b9:d4:77:28:
e7:07:2f:e2:66:f1:07:2f:d9:03:4d:b5:8a:ce:d0:b5:56:c6:
28:45:d0:91:47:4b:d7:22:de:c4:4f:27:d8:12:48:f9:d9:2d:
62:69:b7:e3:f7:b5:dc:38:ce:43:fb:30:a2:68:70:d1:00:1e:
f5:75:a6:10:8d:c8:63:9e:99:72:c3:38:0e:a9:92:2f:06:93:
e8:50:68:50:2d:3b:0d:12:42:dc:44:e3:7c:2a:29:76:c9:7a:
35:fc:9e:26:ca:51:49:35:13:fc:2c:f3:02:7e:92:f0:ea:f4:
82:11:fa:e3:8b:30:8d:33:d2:21:c6:ab:3e:af:52:ee:71:49:
c5:f8:c4:bb:58:f4:fc:65:81:1e:ab:dc:95:ad:84:f0:25:76:
63:de:86:f9:98:03:f3:4e:41:99:af:a0:77:f6:33:24:ee:3e:
d8:7e:e9:95:35:57:43:3f:de:9b:d6:0a:a8:99:f5:b0:43:6d:
a8:39:2d:c7:4c:f3:48:53:11:68:87:3e:3a:3c:fa:0f:03:7a:
d7:c7:06:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:09:58 2025 by rpki-client